From ed6a2780fb1a47cb58d1016db7aa5ae13fa05f4d Mon Sep 17 00:00:00 2001
From: Viktor Barzin <viktorbarzin@meta.com>
Date: Sat, 7 Mar 2026 15:34:32 +0000
Subject: [PATCH] [ci skip] fix Svelte 5 table structure (thead/tbody required)
 + use versioned image tag
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Fixed architecture and services pages to wrap table rows in <thead>/<tbody>
as required by Svelte 5's strict HTML validation.

E2E test passed: clean Alpine container → setup script → kubectl installed →
CA cert verified against API server → TLS SUCCESS
---
 .../files/src/routes/architecture/+page.svelte       |  4 +++-
 .../files/src/routes/services/+page.svelte           | 12 +++++++++---
 2 files changed, 12 insertions(+), 4 deletions(-)

diff --git a/stacks/platform/modules/k8s-portal/files/src/routes/architecture/+page.svelte b/stacks/platform/modules/k8s-portal/files/src/routes/architecture/+page.svelte
index 0f6e0734..2790f074 100644
--- a/stacks/platform/modules/k8s-portal/files/src/routes/architecture/+page.svelte
+++ b/stacks/platform/modules/k8s-portal/files/src/routes/architecture/+page.svelte
@@ -37,12 +37,14 @@ Proxmox (Dell R730)
 		<h2>Service Tiers</h2>
 		<p>Services are organized into tiers that control resource limits and restart priority:</p>
 		<table>
-			<tr><th>Tier</th><th>Examples</th><th>Priority</th></tr>
+			<thead><tr><th>Tier</th><th>Examples</th><th>Priority</th></tr></thead>
+			<tbody>
 			<tr><td><strong>0-core</strong></td><td>Traefik, DNS, VPN, Auth</td><td>Highest — never evicted</td></tr>
 			<tr><td><strong>1-cluster</strong></td><td>Redis, Prometheus, CrowdSec</td><td>High</td></tr>
 			<tr><td><strong>2-gpu</strong></td><td>Ollama, Immich ML, Whisper</td><td>Medium</td></tr>
 			<tr><td><strong>3-edge</strong></td><td>Nextcloud, Paperless, Grafana</td><td>Normal</td></tr>
 			<tr><td><strong>4-aux</strong></td><td>Dashy, PrivateBin, CyberChef</td><td>Low — evicted first under pressure</td></tr>
+			</tbody>
 		</table>
 	</section>
 
diff --git a/stacks/platform/modules/k8s-portal/files/src/routes/services/+page.svelte b/stacks/platform/modules/k8s-portal/files/src/routes/services/+page.svelte
index 2d603dfb..e9648bde 100644
--- a/stacks/platform/modules/k8s-portal/files/src/routes/services/+page.svelte
+++ b/stacks/platform/modules/k8s-portal/files/src/routes/services/+page.svelte
@@ -5,18 +5,21 @@
 	<section>
 		<h2>Core Services</h2>
 		<table>
-			<tr><th>Service</th><th>URL</th><th>Description</th></tr>
+			<thead><tr><th>Service</th><th>URL</th><th>Description</th></tr></thead>
+			<tbody>
 			<tr><td>Grafana</td><td><a href="https://grafana.viktorbarzin.me">grafana.viktorbarzin.me</a></td><td>Monitoring dashboards</td></tr>
 			<tr><td>Uptime Kuma</td><td><a href="https://uptime.viktorbarzin.me">uptime.viktorbarzin.me</a></td><td>Service uptime monitoring</td></tr>
 			<tr><td>Authentik</td><td><a href="https://authentik.viktorbarzin.me">authentik.viktorbarzin.me</a></td><td>Identity provider (SSO)</td></tr>
 			<tr><td>Woodpecker CI</td><td><a href="https://ci.viktorbarzin.me">ci.viktorbarzin.me</a></td><td>CI/CD pipeline</td></tr>
+		</tbody>
 		</table>
 	</section>
 
 	<section>
 		<h2>User-Facing Services</h2>
 		<table>
-			<tr><th>Service</th><th>URL</th><th>Description</th></tr>
+			<thead><tr><th>Service</th><th>URL</th><th>Description</th></tr></thead>
+			<tbody>
 			<tr><td>Nextcloud</td><td><a href="https://nextcloud.viktorbarzin.me">nextcloud.viktorbarzin.me</a></td><td>File storage, calendar, contacts</td></tr>
 			<tr><td>Immich</td><td><a href="https://immich.viktorbarzin.me">immich.viktorbarzin.me</a></td><td>Photo library (Google Photos alternative)</td></tr>
 			<tr><td>Vaultwarden</td><td><a href="https://vault.viktorbarzin.me">vault.viktorbarzin.me</a></td><td>Password manager</td></tr>
@@ -24,18 +27,21 @@
 			<tr><td>Navidrome</td><td><a href="https://music.viktorbarzin.me">music.viktorbarzin.me</a></td><td>Music streaming</td></tr>
 			<tr><td>Tandoor</td><td><a href="https://recipes.viktorbarzin.me">recipes.viktorbarzin.me</a></td><td>Recipe manager</td></tr>
 			<tr><td>Linkwarden</td><td><a href="https://bookmarks.viktorbarzin.me">bookmarks.viktorbarzin.me</a></td><td>Bookmark manager</td></tr>
+		</tbody>
 		</table>
 	</section>
 
 	<section>
 		<h2>Developer Tools</h2>
 		<table>
-			<tr><th>Service</th><th>URL</th><th>Description</th></tr>
+			<thead><tr><th>Service</th><th>URL</th><th>Description</th></tr></thead>
+			<tbody>
 			<tr><td>Forgejo</td><td><a href="https://forgejo.viktorbarzin.me">forgejo.viktorbarzin.me</a></td><td>Git server (Gitea fork)</td></tr>
 			<tr><td>CyberChef</td><td><a href="https://cyberchef.viktorbarzin.me">cyberchef.viktorbarzin.me</a></td><td>Data transformation tool</td></tr>
 			<tr><td>Excalidraw</td><td><a href="https://draw.viktorbarzin.me">draw.viktorbarzin.me</a></td><td>Whiteboard drawing</td></tr>
 			<tr><td>PrivateBin</td><td><a href="https://paste.viktorbarzin.me">paste.viktorbarzin.me</a></td><td>Encrypted paste bin</td></tr>
 			<tr><td>JSON Crack</td><td><a href="https://jsoncrack.viktorbarzin.me">jsoncrack.viktorbarzin.me</a></td><td>JSON visualizer</td></tr>
+		</tbody>
 		</table>
 	</section>
 </main>